I have an index with 100K documents. A user may search the index but must only get as results documents that she has access. The list of documents the user has authorization on is provided by another system and is volatile, so I cannot store this information in the document.
A suggested solution could be to use a filtered query using as filter the documents the user has authorization on. I know that filters are cachable and all, but if the user should have access to eg 50K of the documents it does not seem efficient to include 50K clauses in the filtered query to restrict the result every time.
So the questions are: Should the request size concern me? Is there a more approriate way to achieve the task at hand?